CVE-2025-36058

—

CVSS 3.1

5.5 medium

EPSS

<1%p2

Published

Jan 20, 2026 (Jan 20, 2026)

Modified

Jun 17, 2026

Description

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.

Vendors: ibm
Products: business automation workflow
Weakness: CWE-538
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.